| AZLX-23-000100 - Amazon Linux 2023 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection. | DISA Amazon Linux 2023 STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| AZLX-23-000210 - Amazon Linux 2023 must restrict exposed kernel pointer addresses access. | DISA Amazon Linux 2023 STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY |
| AZLX-23-000225 - Amazon Linux 2023 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution. | DISA Amazon Linux 2023 STIG v1r4 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| AZLX-23-000300 - Amazon Linux 2023 must not have the vsftpd package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| AZLX-23-000310 - Amazon Linux 2023 must not have the nfs-utils package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| AZLX-23-000315 - Amazon Linux 2023 must not have the telnet-server package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| AZLX-23-001015 - Amazon Linux 2023 must require users to reauthenticate for privilege escalation. | DISA Amazon Linux 2023 STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| AZLX-23-001025 - Amazon Linux 2023 must have the audit package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| AZLX-23-001050 - Amazon Linux 2023 must have the chrony package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| AZLX-23-001060 - Amazon Linux 2023 must have the Advanced Intrusion Detection Environment (AIDE) package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| AZLX-23-001075 - Amazon Linux 2023 must have the firewalld package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| AZLX-23-001105 - Amazon Linux 2023 must have the libreswan package installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| AZLX-23-001180 - Amazon Linux 2023 must have SSH installed. | DISA Amazon Linux 2023 STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| AZLX-23-001205 - Amazon Linux 2023 server must be configured to use only DOD-approved encryption ciphers employing FIPS 140-2/140-3 validated cryptographic hash algorithms to protect the confidentiality of SSH server connections. | DISA Amazon Linux 2023 STIG v1r4 | Unix | ACCESS CONTROL |
| AZLX-23-001225 - Amazon Linux 2023 must force a frequent session key renegotiation for SSH connections to the server. | DISA Amazon Linux 2023 STIG v1r4 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| AZLX-23-001250 - Amazon Linux 2023 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive. | DISA Amazon Linux 2023 STIG v1r4 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| AZLX-23-001300 - Amazon Linux 2023 must implement certificate status checking for multifactor authentication. | DISA Amazon Linux 2023 STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| AZLX-23-002020 - Amazon Linux 2023 must use a separate file system for the system audit data path. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| AZLX-23-002075 - Amazon Linux 2023 must encrypt, via the OpenSSL TLS (ossl) driver, the transfer of audit records off-loaded onto a different system or media from the system being audited by rsyslog. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| AZLX-23-002125 - Amazon Linux 2023 must audit all uses of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| SOL-11.1-020330 - Run control scripts library search paths must contain only authorized paths. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-020510 - All .Xauthority files must have mode 0600 or less permissive. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| SOL-11.1-020560 - X Window System connections that are not required must be disabled. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-030010 - The graphical login service provides the capability of logging into the system using an X-Windows type interface from the console. If graphical login access for the console is required, the service must be in local-only mode. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-030030 - Generic Security Services (GSS) must be disabled. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-030050 - TCP Wrappers must be enabled and configured per site policy to only allow access by approved hosts and services. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040200 - The system must restrict the ability of users to assume excessive privileges to members of a defined group and prevent unauthorized users from accessing administrative tools. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-040260 - The default umask for FTP users must be 077. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040310 - Login services for serial ports must be disabled. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040380 - The operating system must terminate the network connection associated with a communications session at the end of the session or after 10 minutes of inactivity. | DISA Solaris 11 X86 STIG v3r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SOL-11.1-040420 - Unauthorized use of the at or cron capabilities must not be permitted. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-040480 - The operating system must not allow logins for users with blank passwords. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050010 - The system must disable directed broadcast packet forwarding. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050050 - The system must not respond to broadcast ICMP echo requests. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050100 - The system must disable TCP reverse IP source routing. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050130 - The system must disable network routing unless required. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-050430 - The FTP service must display the DOD-approved system use notification message or banner before granting access to the system. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL |
| SOL-11.1-050480 - Wireless network adapters must be disabled. | DISA Solaris 11 X86 STIG v3r6 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| SOL-11.1-060140 - The operating system must use cryptographic mechanisms to protect and restrict access to information on portable digital media. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070070 - Users must have a valid home directory assignment. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070090 - All home directories must be owned by the respective user assigned to it in /etc/passwd. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070130 - Reserved UIDs 0-99 must only be used by system accounts. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070160 - User .netrc files must not exist. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070210 - The operating system must have no files with extended attributes. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-070240 - The operating system must reveal error messages only to authorized personnel. | DISA Solaris 11 X86 STIG v3r6 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| SOL-11.1-080030 - Address Space Layout Randomization (ASLR) must be enabled. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-080090 - The kernel core dump data directory must be owned by root. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-090100 - The operating system must prevent the execution of prohibited mobile code. | DISA Solaris 11 X86 STIG v3r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SOL-11.1-090250 - The operating system must verify the correct operation of security functions in accordance with organization-defined conditions and in accordance with organization-defined frequency (if periodic verification). | DISA Solaris 11 X86 STIG v3r6 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| SOL-11.1-100040 - The audit system must identify in which zone an event occurred. | DISA Solaris 11 X86 STIG v3r6 | Unix | CONFIGURATION MANAGEMENT |
